Amima Food Factory (AFF) adheres to the stringent principles governing its operations as a Consumer Products company. This privacy policy ("Privacy Policy") provides the practices and policies applicable to AFF for handling of or dealing in Personal Information, including Sensitive Personal Data or Information (as defined below) that is lawfully collected by AFF.

General Definitions

Reference to “you” or “your” in this Privacy Policy refers to any natural person (including the employees of AFF) who provides to AFF any information referred in Schedule 1 of this document or any user(s) of AFF’s website or business applications whether or not, you purchase the Products sold by AFF.

“Act” shall mean the Information Technology Act, 2000 and Rules thereunder as amended from time to time.

“Effective Date” shall been the effective date of this policy i.e. 21st October, 2021.

“Information” shall mean and include Personal Information and Sensitive Personal Data and Information as may be collected by AFF.

“Personal Information (PI)” shall have the same meaning as under Rule 2 (i) of the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 as amended from time to time. For ease of reference Rule 2 (i) of the Information Technology (Reasonable security practices and procedures and sensitive personal data

or information) Rules, 2011 is re-produced under Schedule 1.

“Rules” shall mean the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 as amended from time to time.

“Registered User” shall mean such user whose registration is accepted by AFF.

“Sensitive Personal Data and Information (SPDI)” shall mean and include information under Rule 3 of the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 as amended from time to time. For ease of reference Rule 3 of the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 is re-produced under Schedule 1.

“Products” for the purpose of this Privacy Policy shall mean and include all kinds of products listed on the website of AFF.

All words and expressions used and not defined in this document but defined in the Act or the Rules shall have the meanings respectively assigned to them in the Act or the Rules.

AFF is fully committed to respecting your privacy and shall ensure that your information is safe. This privacy policy sets out the practices adopted in respect of Information, including the types of Information that is collected, how the Information is collected, how the Information is used, how long the Information is retained and with whom it is shared (“Privacy Policy”). This Privacy Policy is

published in compliance with the provisions of the Act and the Rules made thereunder that require publishing the privacy policy on AFF’s website. AFF urges you to read this Privacy Policy carefully before you entering into any kind of commercial understanding with AFF or decide to part with any Personal Information including the information listed under Schedule 1.

1. COLLECTION OF INFORMATION

1.1 You may use AFF’s website to access Information, learn about its products and services, read publications and check career opportunities etc. without providing any PI/SPDI.

1.2 AFF may collect and process PI/ SPDI provided by you in the following forms:

• Should you opt to purchase products of AFF, which are available to all the customer irrespective of being a Registered User, Information is required to be provided by you at the the time of placing order such as your name, date of birth, address, email ID, gender and phone number. Providing additional information beyond what is required at the time of placing order is entirely optional and can be altered or removed by you at any time.
• Should you opt to register yourself as Registered User of AFF, you will be required to provide Information and shall be given access to the web portal/business applications based on the password based authentication which is chosen by them and securely stored in AFF servers for the purpose of authentication of the Registered Users at the time of login;
• Information that you provide directly to AFF via email or electronic communication;
• Information that you provide to AFF over telephone. AFF may make and keep a record of such information shared by you;
• Information that you provide to AFF in physical form whether sent through post or courier or handed over to a AFF representative in person; and
• PI/SPDI collected by AFF from its employees, suppliers or onsite consultants for the purpose of employment, availing their services and recording their attendance etc.

You will at all times have the option of not providing AFF with PI/SPDI that AFF seeks to collect. Even after you have provided AFF with any PI/SPDI, you will have the option to withdraw the consent given earlier. In such cases, AFF will have the right to not provide or discontinue the transaction or commercial understanding that is linked with such PI/SPDI.

2. USE OF INFORMATION COLLECTED

2.1 Any information, if collected will be used in connection with the relevant purpose as per the contract / arrangement and as under Section 1.2. The provider of information continuing the transaction with AFF shall be deemed to have consented to AFF for the use of such information as under this Policy.

2.2 Employees, suppliers or consultants of AFF shall be duly advised about the purpose for which any Information is being collected at the time of such collection.

3. SHARING OF INFORMATION

3.1 Where PI/SPDI is required to be shared, arising out of any contractual obligation, AFF shall part with such PI/SPDI only in accordance with your consent for the same.

3.2 To the extent necessary to provide you the requested Services or to the extent required under applicable law, we may provide your PI/SPDI to the following Third Parties without notice to you:

(a) Consultants (including auditors, authorized vendors) on a 'need to know' basis under a Non-Disclosure Agreement;

(b) Governmental authorities, in such manner as permitted or required by applicable law; and

3.3 Legal proceedings: In the event, AFF is required to respond to subpoenas, court orders or other legal process, your PI/SPDI may be disclosed pursuant to such subpoena, court order or legal process, which may be without notice to you.

4. SECURITY OF INFORMATION

4.1 AFF strives to ensure the security, integrity and privacy of your PI/SPDI and to protect your Information against unauthorized access, alteration, disclosure or destruction. Stringent security measures (physical, electronic and managerial) are in place to protect against the loss, misuse, and alteration of the PI/SPDI under our control. AFF’s servers are accessible only to authorized personnel and your Information is shared with employees and authorized personnel strictly on a 'need to know' basis.

4.2 As a consumer goods company, AFF uses and has a comprehensive information security process. AFF periodically assesses, audits and updates its information security protocols and policies to achieve the highest standards on a continuous and ongoing basis.

4.3 You may review the Information you have provided to AFF at any time. On your request, AFF will ensure that any PI/SPDI notified to be inaccurate or deficient, shall be corrected or amended. However, AFF shall not be responsible for the authenticity of the PI/ SPDI.

4.4 Notwithstanding anything contained in this Privacy Policy or elsewhere, AFF shall not be held responsible for any loss, damage or misuse of your PI/SPDI, if such loss, damage or misuse is attributable to a Force Majeure Event.

5. RETENTION AND REVOCATION OF INFORMATION

5.1 Your PI/SPDI will be retained with AFF as long as you avail the Services of AFF or for such period as may be necessary under applicable law.

5.2 In the event, you wish to no longer avail the Services of AFF or intend to request that AFF no longer retain your PI/SPDI or where you intend to modify the current PI/ SPDI, you may contact AFF as provided herein below.

6. NOTIFICATION OF CHANGES

6.1 From time to time, AFF may update this Privacy Policy. The Last Updated Date of this policy, stated below (6.3), indicates the last time this policy was revised or materially changed. Checking the effective date below allows you to determine whether there have been changes since the last time you reviewed the policy.

6.2 In the event, if you object to any of the changes, and you no longer wish to use the Services or intend to revoke your consent to retain your PI/SPDI with AFF, you may contact AFF as provided hereunder.

6.3 Last Updated Date: 21st October, 2021

7. INQUIRIES

7.1 AFF respects and is sensitive to the rights as granted in the data protection laws. Should you have questions about the Privacy Policy or AFF’s information collection, use and disclosure practices, you may contact the Grievance Officer as per the details given herein

below. AFF will use reasonable efforts to respond promptly to requests, questions or concerns you may have regarding the use of your PI/SPDI.

Schedule 1

Rule 2

“Personal information" means any information that relates to a natural person, which, either directly

or indirectly, in combination with other information available or likely to be available with a body

corporate, is capable of identifying such person.

Rule 3

Sensitive personal data or information of a person means such personal information which consists

of information relating to:-

(i) password;

(ii) financial information such as Bank account or credit card or debit card or other payment

instrument details ;

(iii) physical, physiological and mental health condition;

(iv) sexual orientation;

(v) medical records and history;

(vi) Biometric information;

(vii) any detail relating to the above clauses as provided to body corporate for providing service;

and

(viii) any of the information received under above clauses by body corporate for processing, stored or processed under lawful contract or otherwise:

provided that, any information that is freely available or accessible in public domain or furnished under the Right to Information Act, 2005 or any other law for the time being in force shall not be regarded as sensitive personal data or information for the purposes of these rules.